$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa File: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (raw, json) Hash identifier: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU= Subject key identifier: 43:48:AF:4E:6D:9D:40:78:59:30:F5:1A:35:5F:CA:0B:AD:24:C3:27 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 665BB9BB89619EF8D7FABDAED378B5DA4D5C07D4 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa Signing time: Fri 27 Dec 2024 14:00:31 +0000 ROA not before: Fri 27 Dec 2024 13:55:31 +0000 ROA not after: Fri 26 Dec 2025 14:00:31 +0000 asID: 138821 IP address blocks: 103.136.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5b:b9:bb:89:61:9e:f8:d7:fa:bd:ae:d3:78:b5:da:4d:5c:07:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Dec 27 13:55:31 2024 GMT Not After : Dec 26 14:00:31 2025 GMT Subject: CN=4348AF4E6D9D40785930F51A355FCA0BAD24C327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:04:95:c6:de:24:09:a1:b5:25:59:c0:a8: a7:f2:b3:00:9a:d6:ce:ac:57:f4:a8:00:af:ff:86: ef:cc:46:fc:bc:e1:01:9d:ae:21:bb:2a:6e:de:0f: 5e:5e:59:b3:71:22:fe:93:b3:c5:51:d8:8c:41:cb: 78:23:c0:44:94:b1:17:ae:82:f0:88:5e:a4:16:12: 5f:4c:fb:76:9c:67:f1:2d:75:c2:f1:94:ac:2d:d6: dc:47:11:d9:75:3b:1b:04:5d:77:9c:b6:af:24:36: 44:3b:2b:39:34:9c:8d:0d:09:56:8c:7c:24:f5:21: 55:06:c2:68:cc:30:7d:17:21:cb:91:b1:fd:f5:b2: f1:db:9f:73:32:5c:fa:73:05:cf:27:a9:57:a8:4f: 37:c1:57:c5:a7:a6:90:bd:b3:03:38:c4:12:5c:33: e5:1b:15:12:ed:68:3d:63:e9:60:36:af:05:c6:a2: e4:af:95:bb:70:bc:fa:49:8d:87:ba:12:36:f7:f9: 0b:58:63:dd:e8:95:a7:dc:ad:bf:76:42:ff:ab:3e: d2:fa:3e:74:5f:aa:78:b4:af:be:30:1e:d7:03:23: ee:27:06:5a:31:2a:00:1e:14:8e:77:9b:0b:6f:93: bb:e8:d8:4d:0b:c5:e3:c3:b5:2a:fb:16:68:80:f9: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:AF:4E:6D:9D:40:78:59:30:F5:1A:35:5F:CA:0B:AD:24:C3:27 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.13.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:1b:34:be:91:ba:fe:16:a3:36:8c:5f:ae:16:ae:cc:df:76: 42:6a:1f:b1:7c:26:db:1f:b0:f4:3b:55:e4:a9:3d:53:d4:af: bd:62:a5:73:93:4f:3b:14:e8:2b:a0:ef:94:b5:4b:48:8f:13: df:d5:ca:80:20:23:87:71:14:94:3e:6a:9f:ae:17:bb:43:a6: 08:b8:1e:06:f1:0d:a9:50:7e:cc:05:fc:f1:21:27:ef:79:8f: 4f:1d:99:a1:f0:ce:35:6b:a0:aa:aa:6d:85:ef:43:6d:71:7c: 45:b8:37:22:14:9a:6a:bc:f5:bd:93:e1:e6:26:37:8f:10:a2: 0f:4c:1b:19:38:19:b0:cc:6d:b0:83:ae:d8:a3:b8:5a:32:27: c9:a2:21:f6:79:19:51:a2:25:30:53:d2:16:11:94:8a:42:f3: f2:69:c6:2b:02:fa:7e:f4:4e:91:15:59:76:2b:e3:c1:c2:e1: 0c:55:39:fe:58:bd:f0:41:6a:c5:cc:a4:63:cc:45:36:49:5f: fa:55:e1:60:6a:73:9e:e9:70:2c:c2:d9:48:25:75:af:8c:3b: a2:ee:06:a1:f3:9a:44:cf:de:64:a2:1c:f9:c0:70:94:ce:ba: df:78:e9:46:d1:1c:66:c8:e7:5a:d3:70:18:38:83:59:1f:5c: 40:fd:ff:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZlu5u4lhnvjX+r2u03i12k1cB9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNDEyMjcxMzU1MzFaFw0yNTEyMjYxNDAwMzFaMDMxMTAvBgNV BAMTKDQzNDhBRjRFNkQ5RDQwNzg1OTMwRjUxQTM1NUZDQTBCQUQyNEMzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPawSVxt4kCaG1JVnAqKfyswCa 1s6sV/SoAK//hu/MRvy84QGdriG7Km7eD15eWbNxIv6Ts8VR2IxBy3gjwESUsReu gvCIXqQWEl9M+3acZ/EtdcLxlKwt1txHEdl1OxsEXXectq8kNkQ7Kzk0nI0NCVaM fCT1IVUGwmjMMH0XIcuRsf31svHbn3MyXPpzBc8nqVeoTzfBV8WnppC9swM4xBJc M+UbFRLtaD1j6WA2rwXGouSvlbtwvPpJjYe6Ejb3+QtYY93olafcrb92Qv+rPtL6 PnRfqni0r74wHtcDI+4nBloxKgAeFI53mwtvk7vo2E0LxePDtSr7FmiA+fGhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ0ivTm2dQHhZMPUaNV/KC60kwycwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05 ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gNMA0GCSqG SIb3DQEBCwUAA4IBAQBeGzS+kbr+FqM2jF+uFq7M33ZCah+xfCbbH7D0O1XkqT1T 1K+9YqVzk087FOgroO+UtUtIjxPf1cqAICOHcRSUPmqfrhe7Q6YIuB4G8Q2pUH7M BfzxISfveY9PHZmh8M41a6Cqqm2F70NtcXxFuDciFJpqvPW9k+HmJjePEKIPTBsZ OBmwzG2wg67Yo7haMifJoiH2eRlRoiUwU9IWEZSKQvPyacYrAvp+9E6RFVl2K+PB wuEMVTn+WL3wQWrFzKRjzEU2SV/6VeFganOe6XAswtlIJXWvjDui7gah85pEz95k ohz5wHCUzrrfeOlG0RxmyOda03AYOINZH1xA/f90 -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net